Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/_JCBvegWuEPJTz-hkBWjjISHUjw.roa
File: _JCBvegWuEPJTz-hkBWjjISHUjw.roa (raw, json)
Hash identifier: pKcHXg+1wb+MCJZfVPzdpwOlc451U8lf6GHksnFsAwc=
Subject key identifier: FC:90:81:BD:E8:16:B8:43:C9:4F:3F:A1:90:15:A3:8C:84:87:52:3C
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 4091
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_JCBvegWuEPJTz-hkBWjjISHUjw.roa
Signing time: Sun 14 Apr 2024 16:22:51 +0000
ROA not before: Sun 14 Apr 2024 16:22:51 +0000
ROA not after: Fri 31 Jan 2025 01:13:46 +0000
asID: 24426
IP address blocks: 43.239.0.0/19 maxlen: 19
101.78.32.0/19 maxlen: 19
103.35.0.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16529 (0x4091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Apr 14 16:22:51 2024 GMT
Not After : Jan 31 01:13:46 2025 GMT
Subject: CN=FC9081BDE816B843C94F3FA19015A38C8487523C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8e:c1:f7:c4:db:5c:0c:e3:f6:42:55:41:54:
95:ef:e9:8c:85:c2:e7:ad:c0:e8:0b:3a:c1:5f:4f:
ec:01:a4:c2:7b:f9:cb:c3:72:59:10:58:c1:3a:63:
37:11:ab:04:7d:c8:56:8d:6a:85:61:9b:97:f9:de:
7a:5b:dd:e4:d4:79:69:4f:d7:4a:8e:d7:e5:49:8f:
58:b8:ed:4f:08:65:bd:6b:8b:b8:ff:07:3a:68:8c:
bf:49:b8:8c:6e:60:c4:c2:78:db:f6:04:bf:32:0b:
2d:8e:d2:e7:78:cc:2a:01:e0:07:8c:07:e8:21:09:
6a:38:e1:ca:51:f4:52:79:29:a7:4d:2b:79:62:3c:
f6:c9:f6:d4:b7:2d:91:5e:36:c2:0f:32:cb:77:32:
74:37:5a:20:58:bd:16:d0:76:43:d1:45:3b:6d:da:
34:1f:33:3e:e7:94:05:c5:3c:ad:f5:98:cd:b5:cf:
91:b4:55:14:07:df:67:ea:36:58:5d:82:be:53:e7:
43:0c:95:b6:5b:b3:33:7a:d5:79:35:7b:88:a2:35:
dd:3f:28:c4:37:0a:cf:5e:11:5f:bd:1e:95:b4:bb:
a2:3d:ee:7a:b6:ce:2a:23:bb:d6:68:27:fe:da:28:
4c:91:82:73:a1:35:ac:29:a9:b8:63:6a:9d:83:6f:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:90:81:BD:E8:16:B8:43:C9:4F:3F:A1:90:15:A3:8C:84:87:52:3C
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/_JCBvegWuEPJTz-hkBWjjISHUjw.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.0.0/19
101.78.32.0/19
103.35.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:98:ed:aa:31:df:2e:66:41:82:c5:0b:71:f8:95:4b:37:3f:
78:5f:74:3e:b6:52:d8:07:01:28:bc:f7:3c:66:cf:78:8a:1c:
19:64:29:53:11:b7:88:85:78:d1:63:37:14:9e:8b:4d:54:a1:
f5:8b:25:f4:ec:c7:ab:06:c7:b9:fa:29:cb:ec:6f:fd:02:e5:
f5:2d:e0:93:7b:f1:6a:aa:c0:0d:e9:24:14:c1:93:8f:27:fd:
58:40:b3:2d:f5:01:f5:e9:a2:83:60:75:f5:16:25:20:a5:e6:
c4:a3:e6:f7:b8:38:28:86:36:e9:9d:99:b7:43:0e:c8:13:c2:
80:85:c0:4d:b0:11:3d:98:c9:02:f6:d8:67:87:43:ad:d0:9b:
8f:8b:b1:84:89:02:2b:c8:2e:5b:f1:b5:ea:da:a6:25:bb:10:
c4:71:09:eb:a6:6d:41:43:ae:ba:00:e7:70:79:62:df:ea:de:
5e:3d:e9:fc:a5:2a:83:eb:db:44:f2:3c:7a:29:d8:24:2a:4b:
7f:11:f5:04:17:f8:8b:eb:74:51:01:8c:a6:4b:dd:fe:0b:7d:
99:25:14:50:4b:38:a1:58:e3:09:a2:99:42:33:ae:65:54:8d:
55:35:29:11:9d:1a:49:a3:f6:b0:17:c0:42:d9:53:1c:50:75:
4a:b3:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:48:52 2024 by rpki-client on console-ams.rpki-client.org